Q25Security Policies and ProceduresMultiple answers
An engineer is collaborating with the compliance teams to identify the data passing through the network. During the analysis, the engineer tells the compliance team that external-perimeter data flows contain records, writings, and artwork. Internal segregated-network flows contain customer choices by gender, addresses, and product preferences by age. The engineer must identify protected data. Which two types of data must be identified? (Choose two.)
Select 2 answers.
← → navigate · a answer
Community votes
Discussion · 5
B, E 6
Selected Answer: BE
Writing & Artwork are copyright protected. We are not dealing with Health related data in this scenario.
B, E 3
Selected Answer: BE
PHI (Protected Health Information)
- They are individually identifiable health information that is transmitted or maintained in any form or medium (electronic, oral, or paper) by a covered entity or its business associates, excluding certain educational and employment records.
Since no health information is mentioned, Copyright would be the most sensible choice.
B, E 2
Selected Answer: BE
Answer is BE.
a. Sox is a guideline/framework
c. PCI is a guideline/framework
d. PHI, no specific data related to PHI was mentioned in the question (Patient ID, MRN, Xray, Citiscan records etc.)
2
Correct ANS= B.E
2
B and E
health information is not relevant.